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IN THE CLAIMS 

Please amend the claims to be in the form as follows: 

Claim 1 (previously presented): Method fur secure data communication to transfer 
content between consumer devices, the method comprising the following steps: a) 
activating a data comniunication link between the devices, b) transmitting data between 
the devices for performing an authentication session for authenticating the consumer 
devices, wherein the authentication session generates a firsL key, characterized in that the 
method further comprises the step of: c) transmitting data between the devices for 
performing a subsequent authentication session for authenticating the consumer devices, 
wherein the subsequent authentication session generates a second key used in transferring 
audio or visual content. 

Claim 2 (currently amended): The method as claimed in claim 1, characterized in that the 
method further comprises the step of: d) generating a link key (9) for encrypting and/or 
decrypting the data communicated over the data communication link by merging the first 
key (5) with the second key (6) using a key merge function. 

Claim 3 (previously presented): The method as claimed in claim 1, characterized in that 
the authentication sessions axe performed independent of each other. 

Claim 4 (original): The method as claimed in claim 1 , characterized in that step b) 
further comprises transmitting additional data between the devices for deciding whether 
of not to proceed with step c). 

Claim 5 (previously presented): The method as claimed in claim 1, characterized in that 
the first authentication session is an authentication session as described in the 
BLUETOOTH link encryption specification. 

Claim 6 (original): The method as claimed in claim 2, characterized in tliat the key 
merge function has one or more of the following properties: for any two given first and 
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second keys as input in the key merge function, the link key output of the key merge 
function is uniquely specified; the number of link key output bits is constant;--if the 
second key is undefined or all zero, the link key output bits arc identical to the bits of the 
first key; for any first key, the uncertainty in the output is approximately equal to the 
uncertainty of the second key; for arty second key, the uncertainly in the output is 
approximately equal to the uncertainty of the first key. 

Claim 7 (original): The method as claimed in claim 6, characterized in thai the key 
merge function is a bit-wise XOR-fiinction. 

Claim 8 (original): The method as claimed in claim 2, characterized in that the key 
merge function comprises encrypting the first key with the second key or vice versa. 

Claim 9 (previously presented): Consumer device for performing the method according 
to claim 1, the consumer device comprising means for activating a data communication 
link, means for transmitting data, authentication means for performing an authentication 
session and further authentication means for performing another authentication session. 

Claim 10 (original): The consumer device as claimed in claim 9, characterized in that the 
consumer device further comprises an Application Programmers Interface (API) for 
informing the consumer device about Use protection status of another consumer device. 

Claim 1 1 (previously presented): The consumer device as claimed in claim 9* 
characterized in that the consumer device further comprises receiving means for 
receiving infonnatioa, decrypting means for decrypting the information using the link 
key (9) and recording means for recording the information. 

Claim 12 (original): The consumer device as claimed in claim 9, wherein the consumer 
device is a portable device, e.g. a headphone or a walkman. 

Claim 13 (original): The consumer device as claimed in claim 9, wherein the consumer 
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device comprises means for performing short-range wireless data communication. 

Claim 14 (currently amended): Signal comprising data transmitted between ihc devices 
(1^2) as used in claim 1, wherein the daia is used for performing the authentication 
sessions f° r authenticating the devices. 

Claim 15 (currently amended): Signal comprising a fust key and a second key (6) 
obtained after performing the method of claim 1 . 

Claim 16 (currently amended): Signal according to claim 1 5, characterized in that it 
further comprises a link key (9) for encrypting and/or decrypting audio or video content 
data communicated over the data communication link, the link key being generated by 
merging the first key (5) with the second key (6) using a key merge function. 

Claim 1 7 (previously presented): The method of claim 1 wherein transferring audio or 
visual content further comprises before transferring, determining a compliance level 

Claim 18 (previously presented): The method of claim 17 wherein determining a 
compliance level further comprises determining rights that have been placed on content 
to determine the compliance level. 

Claim 1 9 (previously presented): The method of claim I wherein during the subsequent 
authentication session a device for downloading audio or visual content proves thai it is 
allowed to download the content. 

Claim 20 (previously presented): The meth<Kl of claim 1 9 wherein during the subsequent 
authentication session the device for downloading audio or visual content is limited in 
terms of quality for content it is allowed to download in response to a result Irom the 
subsequent authentication session. 
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